Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft
File:                     0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft (raw, json)
Hash identifier:          MOLzOuXxdJn4P9gPsZMDFaM4Fbtr3UDWrTOQr8AuOlM=
Subject key identifier:   44:96:85:2D:9E:1A:56:99:3E:71:F0:E3:D8:0C:C5:30:E3:9F:C5:9A
Authority key identifier: 06:23:BB:87:43:11:6D:86:B1:3B:9B:D9:E5:34:02:39:8B:7A:1E:E0
Certificate issuer:       /CN=0623bb8743116d86b13b9bd9e53402398b7a1ee0
Certificate serial:       486D6B798CCE27B5830B492126DA1E0DBF6BFBCE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BiO7h0MRbYaxO5vZ5TQCOYt6HuA.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft
Manifest number:          01FF
Signing time:             Sat 26 Jul 2025 11:09:18 +0000
Manifest this update:     Sat 26 Jul 2025 11:04:18 +0000
Manifest next update:     Sun 27 Jul 2025 13:31:18 +0000
Files and hashes:         1: 0623BB8743116D86B13B9BD9E53402398B7A1EE0.crl (hash: JCSy/T5HYScfAb3/5j5DbczLJBqOroS5Vd1GsZvgom8=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BiO7h0MRbYaxO5vZ5TQCOYt6HuA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:6d:6b:79:8c:ce:27:b5:83:0b:49:21:26:da:1e:0d:bf:6b:fb:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0623bb8743116d86b13b9bd9e53402398b7a1ee0
        Validity
            Not Before: Jul 26 11:04:18 2025 GMT
            Not After : Jul 27 13:31:18 2025 GMT
        Subject: CN=4496852D9E1A56993E71F0E3D80CC530E39FC59A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6a:9d:87:b7:86:ab:5c:e4:6e:42:f0:d9:f5:
                    4b:ec:2b:e8:4d:98:0d:29:6b:42:88:ea:9b:a4:00:
                    81:2b:88:7d:32:a7:6b:ec:80:72:77:95:bb:14:64:
                    3e:cb:74:22:ed:df:63:70:3d:a8:11:76:3b:f6:cf:
                    24:ad:6a:b4:a4:97:66:b5:9f:ed:f5:6f:a7:f2:77:
                    32:c4:56:fc:a3:8a:4a:f9:b7:df:ec:7c:5c:b7:27:
                    73:06:21:f7:c1:69:af:38:1f:5c:dc:d9:01:a9:19:
                    03:37:33:f2:ed:e3:b4:20:4d:24:f9:5f:85:0d:69:
                    1e:1f:fb:0b:b7:67:9b:14:ee:0c:70:41:a0:d7:c1:
                    d3:1a:87:6a:39:cf:dd:00:d3:4e:6b:ec:40:28:f3:
                    03:d8:f6:16:d0:f6:b2:79:28:25:85:61:e3:28:b2:
                    e4:8e:fc:58:ef:24:b2:ab:ec:c2:ba:a9:e2:5a:6e:
                    58:4d:7c:e5:87:e9:f8:0a:91:fa:7b:d5:39:b7:68:
                    49:19:da:92:16:aa:d3:dd:f7:dd:19:7b:06:a6:b2:
                    06:82:44:ba:6c:f5:d6:14:24:8c:77:27:b2:f9:90:
                    d1:10:fe:5c:38:2d:f9:39:af:e2:a5:9c:94:b7:e4:
                    92:ba:52:e4:ca:c9:fd:9c:a0:7e:bc:42:36:fb:21:
                    be:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:96:85:2D:9E:1A:56:99:3E:71:F0:E3:D8:0C:C5:30:E3:9F:C5:9A
            X509v3 Authority Key Identifier:
                keyid:06:23:BB:87:43:11:6D:86:B1:3B:9B:D9:E5:34:02:39:8B:7A:1E:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiO7h0MRbYaxO5vZ5TQCOYt6HuA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:55:e0:6e:95:53:c2:1a:a9:4a:3d:78:82:2f:c5:68:6e:34:
         9f:8e:16:1d:2c:a3:8b:12:99:e3:f1:61:ea:48:f1:40:c1:c4:
         e0:78:4d:67:41:3f:d4:3f:62:8d:82:ae:22:c3:b2:05:60:aa:
         84:18:92:06:3a:78:99:68:7e:5a:8e:7a:a2:22:6a:7c:0d:c4:
         24:0a:1e:b6:38:f4:e7:c9:19:fb:21:77:c9:f7:c6:fa:04:6e:
         f8:6b:44:72:b2:c5:1a:c9:c5:41:37:cb:5c:82:94:90:84:3b:
         5f:dc:2c:b6:48:66:34:4a:db:88:fe:2b:4a:66:4f:fe:fa:87:
         df:c8:0b:15:02:1b:33:2a:f4:8f:ff:12:8d:3a:4c:88:34:1a:
         98:93:67:f4:d8:e1:ff:a2:6b:50:cc:6b:53:32:e3:60:f0:b4:
         9a:aa:e1:13:fe:5e:8c:1f:9d:5b:ec:7f:3c:d9:e7:14:17:fc:
         3c:de:39:94:ff:07:60:56:1a:51:4c:fe:9d:ad:08:c7:9a:45:
         c9:51:a8:8f:09:9f:14:3d:f1:85:c5:5f:31:57:a3:4b:8d:b9:
         68:04:df:0d:91:b9:9c:fa:48:fe:70:9a:2e:58:68:4e:06:65:
         5f:50:db:9c:5a:0f:26:65:f3:6d:e0:f6:f0:cf:98:6e:b9:a2:
         f1:41:13:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:50:41 2025 by rpki-client